The repository has no commits in the last three months and no recent registry releases, while security scanning and a security policy are absent. It is clearly licensed, documented, and aligned with its repository, which reduces transparency concerns.
57%
Total Score
67
81
75
Only one registry publishing account is listed, which limits visible release redundancy; the organization-backed repository partially offsets this concern.
The latest release was on May 15, 2022, with no releases in the last 12 months; this indicates prolonged maintenance inactivity despite four total releases.
There were zero commits and zero active maintainers in the last three months, consistent with a project that has been dormant since its May 2022 push.
The repository has one star, zero forks, and zero watchers. This is weak supporting evidence of maturity, though popularity alone does not determine safety to depend on.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.